Test ID:	1.3.6.1.4.1.25623.1.0.800035
Category:	Buffer overflow
Title:	Adobe Flash CS3 SWF Processing Buffer Overflow Vulnerabilities (APSA08-09)
Summary:	Adobe Flash CS3 is prone to multiple buffer overflow; vulnerabilities.
Description:	Summary: Adobe Flash CS3 is prone to multiple buffer overflow vulnerabilities. Vulnerability Insight: The issues are due to boundary errors while processing overly long SWF control parameters. Vulnerability Impact: Successful exploitation could allow remote attackers to cause heap based buffer overflows via specially crafted SWF files. Affected Software/OS: Adobe Flash CS3 Professional on Windows. Solution: Update to Adobe Flash CS4 Professional or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4473 BugTraq ID: 31769 http://www.securityfocus.com/bid/31769 Bugtraq: 20081015 Multiple Flash Authoring Heap Overflows - Malformed SWF Files (Google Search) http://www.securityfocus.com/archive/1/497397/100/0/threaded http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf http://securitytracker.com/id?1021060 http://secunia.com/advisories/32246 http://securityreason.com/securityalert/4429 http://www.vupen.com/english/advisories/2008/2837 XForce ISS Database: adobe-flash-cs3-bo(45914) https://exchange.xforce.ibmcloud.com/vulnerabilities/45914
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.